Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier: NEMSsUrjWEfseBlCgh0Go+Q+3ecBdhu12p/z7XSjPM0=
Subject key identifier: 49:96:87:3D:E8:DD:54:6D:BC:77:92:4D:00:A1:78:D4:DB:FC:05:2A
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 0198530DC781BC129C96FEC21B94E635D452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number: 0CDC
Signing time: Mon 28 Jul 2025 22:01:08 +0000
Manifest this update: Mon 28 Jul 2025 22:01:08 +0000
Manifest next update: Tue 29 Jul 2025 22:01:08 +0000
Files and hashes: 1: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: Ws8WqY09XOwagFx1E8kbagKa6KHZaOhnHsa73+s2Fqo=)
2: _tUXooY9b06bDKDjgo1P9zjilGI.roa (hash: eyE2Sp1NPUfSOv01mHhVH2OIahlIo+oZSctInWb+NT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:c7:81:bc:12:9c:96:fe:c2:1b:94:e6:35:d4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Jul 28 22:01:08 2025 GMT
Not After : Jul 29 22:01:08 2025 GMT
Subject: CN=4996873de8dd546dbc77924d00a178d4dbfc052a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:a3:f2:01:4d:97:a1:b6:a3:97:d6:df:70:
93:9a:b9:bc:c8:0a:f0:cb:56:61:75:19:32:54:13:
b3:b2:ac:61:9e:09:ca:11:90:92:bb:d1:e9:88:94:
9c:72:3f:10:46:a5:e1:3d:a5:ca:d0:9c:a9:33:71:
90:df:6a:47:d2:02:fd:f2:82:13:ce:d4:8c:e4:21:
b6:1b:1d:51:21:28:09:45:b6:67:60:c8:7f:08:bd:
eb:ba:b7:8f:48:81:12:50:10:51:94:db:8f:20:05:
42:b7:82:39:2f:33:86:f6:16:1c:99:cb:9b:df:c2:
d1:c2:51:78:8d:24:eb:76:a3:87:64:69:9c:1a:0b:
b4:20:3a:02:26:ff:0e:85:95:84:ef:71:8b:57:ca:
99:1c:43:22:52:6f:6e:67:e1:0c:65:fa:9b:1d:2a:
ee:33:da:ce:1a:79:08:bf:6f:91:15:19:fa:40:bd:
22:6f:13:f9:7a:31:25:18:b4:63:00:43:ad:87:09:
3e:c4:80:3b:a6:a3:7e:64:3a:1e:5d:93:40:a3:64:
7d:1f:5a:2c:42:0c:4c:29:cc:40:a5:2d:46:e5:dd:
4c:24:99:0e:13:0e:28:fe:50:a6:4e:70:f1:f8:33:
e1:82:58:d7:f2:f9:e3:f0:5b:7e:5c:03:76:f8:9a:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:96:87:3D:E8:DD:54:6D:BC:77:92:4D:00:A1:78:D4:DB:FC:05:2A
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3c:a2:57:bf:53:7f:92:eb:1b:f2:8e:3d:3a:d2:9f:d8:75:
9a:72:95:d6:89:e2:8c:7a:a3:ec:21:4f:06:d2:a9:ec:c4:d5:
75:55:6f:50:de:b3:79:55:73:e4:9e:87:af:29:08:6c:71:67:
f6:4a:a2:e1:3e:fb:02:81:b7:01:3a:b8:c3:aa:ab:9b:35:13:
05:f9:92:ff:41:ff:3f:92:87:2b:e7:df:6b:ec:aa:1b:4a:65:
30:fe:65:fb:9c:ac:31:b3:7d:ad:d2:cf:c6:33:b3:1c:77:6e:
c7:46:9b:93:d9:1f:fe:40:35:54:62:42:af:06:24:e4:7e:38:
67:fd:8c:f6:cc:73:f5:6d:59:3e:dd:50:35:92:3e:a5:fb:46:
03:72:69:96:cb:1d:9a:a7:8c:e0:17:0c:c6:a5:58:70:91:c1:
62:a8:19:3f:16:83:1e:d1:f8:5b:d7:13:79:93:a1:3c:3e:f1:
24:99:a8:fa:38:ff:89:2d:5d:01:35:cb:a3:24:36:fa:ed:e3:
a3:ca:3a:9c:b1:5f:57:b9:9c:ec:20:e2:17:97:fb:95:a6:df:
8c:cc:b4:cc:f7:b9:45:22:fb:72:7c:1a:5a:a3:72:6e:f9:e6:
eb:41:5f:b0:51:65:bd:45:e2:83:eb:01:8f:99:c8:1a:25:c1:
12:c7:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:24:56 2025 by rpki-client